Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier: u4tmdUwLYRwu17TEgqXWrm6lY5jMCxbIsSD0eRXbQxw=
Subject key identifier: 62:A2:EF:A7:46:27:11:7A:69:E9:65:C4:12:96:94:86:39:30:22:71
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 019D2695E65E1653981D3144DFA94FA4AEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:00:51 +0000
Manifest this update: Wed 25 Mar 2026 20:00:51 +0000
Manifest next update: Thu 26 Mar 2026 20:00:51 +0000
Files and hashes: 1: 6e2vKhHmL-ZebC_h3M0uX9UQPQE.roa (hash: MuJkDaToFHy1onqOvnRia1v4P6X9FnZyEUR50zhW13E=)
2: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: BoxzNAXZ/duJZKOkK2VB6al1svxek6cCEOUPIC95jx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e6:5e:16:53:98:1d:31:44:df:a9:4f:a4:ae:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Mar 25 20:00:51 2026 GMT
Not After : Mar 26 20:00:51 2026 GMT
Subject: CN=62a2efa74627117a69e965c41296948639302271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e8:51:fd:ce:1f:4f:98:8d:69:1d:2b:31:ec:
4f:c1:e4:bd:dd:30:4c:98:73:b0:e9:e4:5e:1c:0d:
f9:42:ba:a5:69:f4:08:73:18:66:dd:61:b5:db:2d:
45:7c:cf:50:28:59:cb:a9:68:d9:56:c9:f4:76:fe:
be:bf:36:af:0f:bd:77:59:9c:42:0f:9f:22:b1:04:
52:dc:e6:2f:b2:62:1e:4d:58:3b:9b:6d:05:67:cf:
53:e5:18:3a:e0:fb:1b:59:28:b1:68:9e:bd:90:fa:
80:75:9f:37:47:d8:b4:b1:c2:a3:46:86:51:d8:cc:
d0:ef:91:e0:18:71:9a:55:43:5f:d6:25:c2:a0:dc:
86:2d:61:da:c1:27:c5:dc:ae:a2:96:8e:7d:a1:f3:
bd:d9:86:84:3f:6e:fc:3d:27:9a:4d:51:6b:73:79:
2d:61:8d:46:e7:c7:e3:be:d1:de:5a:cd:98:ee:4d:
fa:6e:73:9d:85:08:e3:fc:72:1c:19:24:7c:c5:17:
3e:5e:91:7e:7f:81:1c:aa:56:13:07:ae:36:cc:64:
bb:93:b7:3f:90:99:06:2b:10:93:6f:52:f4:1f:09:
c1:d1:86:49:7c:d7:eb:1a:e5:f0:b6:0d:a5:cc:fc:
8b:2b:f6:68:31:ac:25:90:d6:f9:89:42:2e:73:70:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A2:EF:A7:46:27:11:7A:69:E9:65:C4:12:96:94:86:39:30:22:71
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:74:8a:36:3f:43:6b:55:fe:bb:aa:5a:66:68:dc:bb:be:e5:
62:c3:12:37:f1:85:e0:04:06:e6:93:c2:51:e1:15:63:3d:8a:
ef:0a:a3:1d:d9:9b:bd:81:c0:d7:4b:c6:06:8f:82:77:56:02:
11:8a:0d:30:83:e7:43:8b:f1:ca:6f:6f:60:12:4d:3b:38:b7:
00:a1:ac:b9:c7:81:de:42:f2:69:b0:04:80:5f:5f:34:a5:91:
b6:6a:e8:55:7f:98:df:ee:2c:f0:21:1c:08:77:13:c2:1c:b6:
2f:57:e8:2b:ac:2a:7c:1e:16:8b:a1:47:03:c7:a0:17:0e:42:
67:e5:3f:ee:b6:b2:40:9b:d4:46:b1:52:cc:c3:5a:98:9b:4c:
5d:9f:6e:f7:b6:ec:1b:63:1c:86:a2:18:cb:8f:b9:22:df:3e:
fd:c2:f0:38:71:71:72:85:ff:cc:9e:86:f4:a2:17:f7:0d:ec:
06:83:9e:4c:2f:d4:bf:6c:80:91:4a:ff:c8:5f:a7:39:4c:ca:
96:08:80:60:33:ab:4d:d7:76:3d:f3:74:dd:fa:ea:0a:0b:a7:
f1:e1:d0:38:b2:2c:89:b7:a7:b1:af:fd:16:ca:6b:ca:00:a8:
f0:0d:1e:53:10:c0:7b:54:ca:97:ae:4c:96:87:8e:b8:c2:d7:
a6:fb:a1:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mleZeFlOYHTFE36lPpK7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkY2I5NzZiYjYwMjkyMTZmN2EyYWQwNWI3OTMyZjRhNTVl
MGNmOGEwHhcNMjYwMzI1MjAwMDUxWhcNMjYwMzI2MjAwMDUxWjAzMTEwLwYDVQQD
Eyg2MmEyZWZhNzQ2MjcxMTdhNjllOTY1YzQxMjk2OTQ4NjM5MzAyMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguhR/c4fT5iNaR0rMexPweS93TBM
mHOw6eReHA35QrqlafQIcxhm3WG12y1FfM9QKFnLqWjZVsn0dv6+vzavD713WZxC
D58isQRS3OYvsmIeTVg7m20FZ89T5Rg64PsbWSixaJ69kPqAdZ83R9i0scKjRoZR
2MzQ75HgGHGaVUNf1iXCoNyGLWHawSfF3K6ilo59ofO92YaEP278PSeaTVFrc3kt
YY1G58fjvtHeWs2Y7k36bnOdhQjj/HIcGSR8xRc+XpF+f4EcqlYTB642zGS7k7c/
kJkGKxCTb1L0HwnB0YZJfNfrGuXwtg2lzPyLK/ZoMawlkNb5iUIuc3BabwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKi76dGJxF6aellxBKWlIY5MCJxMB8GA1UdIwQY
MBaAFP3Ll2u2ApIW96KtBbeTL0pV4M+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWIt
ZDg4OGEwNjg5YzE5LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWItZDg4OGEwNjg5YzE5
LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHSKNj9D
a1X+u6paZmjcu77lYsMSN/GF4AQG5pPCUeEVYz2K7wqjHdmbvYHA10vGBo+Cd1YC
EYoNMIPnQ4vxym9vYBJNOzi3AKGsuceB3kLyabAEgF9fNKWRtmroVX+Y3+4s8CEc
CHcTwhy2L1foK6wqfB4Wi6FHA8egFw5CZ+U/7rayQJvURrFSzMNamJtMXZ9u97bs
G2MchqIYy4+5It8+/cLwOHFxcoX/zJ6G9KIX9w3sBoOeTC/Uv2yAkUr/yF+nOUzK
lgiAYDOrTdd2PfN03frqCgun8eHQOLIsibensa/9FsprygCo8A0eUxDAe1TKl65M
loeOuMLXpvuhRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:46 2026 by rpki-client